7.5
CVE-2021-32945
- EPSS 0.4%
- Veröffentlicht 01.04.2022 23:15:09
- Zuletzt bearbeitet 21.11.2024 06:07:58
- Quelle ics-cert@hq.dhs.gov
- CVE-Watchlists
- Unerledigt
LoginMDT AutoSave Inadequate Encryption Strength
An attacker could decipher the encryption and gain access to MDT AutoSave versions prior to v6.02.06.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Auvesy-mdt ≫ Autosave Version < 6.02.06
Auvesy-mdt ≫ Autosave Version >= 7.00 <= 7.04
Auvesy-mdt ≫ Autosave For System Platform Version < 4.01
Auvesy-mdt ≫ Autosave For System Platform Version5.00
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.4% | 0.311 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
| ics-cert@hq.dhs.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-326 Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
https://www.cisa.gov/uscert/ics/advisories/icsa-21-189-02